CVE-2023-32749

CVE-2023-32749 PoC 이것은 Pydio Cells용 CVE-2023-32749를 위해 제가 작성한 빠르고 간단한 PoC입니다. 이 스크립트는 유효한 자격 증명이 제공되면 사용 가능한 모든 역할을 가진 새 사용자 계정을 생성합니다. 모든 공로는 원래 연구자에게 있습니다. 설치 유일한 요구 사항은 웹 요청을 위한 Python의 requests 패키지입니다. 시스템에 설치되어 있지 않은 경우 다음 명령어로 설치할 수 있습니다. root@kitploit: pip3 install -r requirements.txt 사용법...

CVE-2023-32749

creationtimestamp| type| source ---|---|--- 2026-04-06 21:00:05+00:00| published-proof-of-concept| Telegram/A1qg1RolaBwsACBTI2hdl9LKX69FzxBc1xCrm7xs4Pt8oY...

CVE-2023-32749

CVE-2023-32749 affects Pydio Cells. An attacker can modify the HTTP request when creating external users, permitting assignment of arbitrary roles to the new account. If all roles are granted, the attacker gains access to all cells and non-personal workspaces. Documented impact is privilege escal...

CVE-2023-32749

Pydio Cells allows users by default to create so-called external users in order to share files with them. By modifying the HTTP request sent when creating such an external user, it is possible to assign the new user arbitrary roles. By assigning all roles to a newly created user, access to all...

CVE-2023-32749

Pydio Cells allows users by default to create so-called external users in order to share files with them. By modifying the HTTP request sent when creating such an external user, it is possible to assign the new user arbitrary roles. By assigning all roles to a newly created user, access to all...

Pydio Cells 4.1.2 - Unauthorised Role Assignments

Exploit Title: Pydio Cells 4.1.2 - Unauthorised Role Assignments Affected Versions: 4.1.2 and earlier versions Fixed Versions: 4.2.0, 4.1.3, 3.0.12 Vulnerability Type: Privilege Escalation Security Risk: high Vendor URL: https://pydio.com/ Vendor Status: notified Advisory URL:...

Pydio Cells 4.1.2 Privilege Escalation

Advisory: Pydio Cells: Unauthorised Role Assignments Pydio Cells allows users by default to create so-called external users in order to share files with them. By modifying the HTTP request sent when creating such an external user, it is possible to assign the new user arbitrary roles. By assignin...